Quick Start
This quick start guide enables security teams to onboard and collect data quickly to cover the organizations chosen identity provider.
1. Tenant Registration
The first action in the onboarding process is the tenant registration, no matter if interested in a cloud or on-prem deployment. Hydden creates a tenant during our customer onboarding kickoff call and adds the company’s administrators to the new tenant. Customers can also navigate to https://portal.hydden.com and request a tenant.
Refer to the How to Register with Hydden documentation topics for detailed instructions.
After your registration has been approved, you are ready for your initial sign in, at which time you must accept our Terms of Services to continue.
2. Client Deployment
Hydden collects data using clients. These clients need to be deployed and configured before data collection can begin.
Visit the Packages download site for the client installation. Clients are services that need to be installed locally on the system from which they collect data, or be installed in a container.
Refer to
- Deploy a Client for OS-based client deployments.
- Deploy as a Container for container deployments.
- Register a Client for client registration instructions.
- Configure a Client for client configuration instructions.
NOTE: For outbound communication from your local system or container to the Hydden platform, open TCP port 22101. Client to data source communication uses the standardized ports expected for the data source type.
When you add a client, you establish a site association that is utilized in your Data Source configuration, which is the next step during onboarding.
3. Data Collection
Once clients are deployed, the data collection can begin. Hydden uses Data Sources to set up collectors.
Navigate to Configuration | Discover and select Data Source. Use + Add Data Source to configure and collect from your organization’s main identity provider used to register and sign into Hydden. If you are using
- Microsoft’s Entra ID, refer to How to Configure an Azure Data Source.
- Okta, refer to How to Configure an Okta Data Source.
- AWS Cognito, refer to How to Configure an AWS Data Source.
Once the first Data Source is configured, you can manually run the data collection.
Refer to the Discover documentation topics for detailed instructions.
4. Data Review
After the initial data collection, navigate to the Identity Posture dashboard to get an overview of your identity posture.
Review automatically mapped accounts under Confguration | Identify and the Identity Mapping tab. Review orphaned accounts and manually map them to an identity.
Refer to Identity Mapping for details.